Critical Flash Update Plugs 12 Security Holes
Summary: Adobe released a critical Flash Player update fixing at least a dozen security vulnerabilities across Windows, Mac, Linux, Solaris and Android, plus Adobe Air, with users on Flash 11.0.1.152 and earlier directed to version 11.1.102.55. Adobe said it was not aware of any active attacks against the flaws at the time, and confirmed that some of the issues also affect the Authplay.dll component shipped with Adobe Reader and Acrobat X and 9.x, which the company expects to resolve in its quarterly Reader update scheduled for January 10, 2012.
Key Takeaway: The flaws were rated critical, meaning a malicious website could use them to install software on a machine, and the Reader and Acrobat exposure will remain unpatched until January 10, 2012 - a window your patching schedule has to account for.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026